feat(opnsense-config): Xml parsing now works great to parse a full production config. Only some element ordering that is not consistent across multiple elements of the same type sometimes does not match but moving some stuff around gets us easily to a 100% matching file
This commit is contained in:
Jean-Gabriel Gill-Couture
parent
ab59923dae
commit
50ca6afb47
@ -170,13 +170,16 @@ impl Config {
|
||||
|
||||
#[cfg(test)]
|
||||
mod tests {
|
||||
use crate::infra::yaserde::to_xml_str;
|
||||
|
||||
use super::*;
|
||||
use std::path::PathBuf;
|
||||
use pretty_assertions::assert_eq;
|
||||
|
||||
#[tokio::test]
|
||||
async fn test_load_config_from_local_file() {
|
||||
let mut test_file_path = PathBuf::from(env!("CARGO_MANIFEST_DIR"));
|
||||
test_file_path.push("src/tests/data/config-structure.xml");
|
||||
test_file_path.push("src/tests/data/config-full-1.xml");
|
||||
|
||||
let config_file_path = test_file_path.to_str().unwrap().to_string();
|
||||
println!("File path {config_file_path}");
|
||||
@ -188,13 +191,9 @@ mod tests {
|
||||
|
||||
println!("Config {:?}", config);
|
||||
|
||||
let yaserde_cfg = yaserde::ser::Config { perform_indent: true,
|
||||
.. Default::default()
|
||||
};
|
||||
let serialized = yaserde::ser::to_string_with_config(&config.opnsense, &yaserde_cfg).unwrap();
|
||||
let serialized = to_xml_str(&config.opnsense).unwrap();
|
||||
|
||||
fs::write("/tmp/serialized.xml", &serialized).unwrap();
|
||||
std::process::Command::new("xmllint").arg("/tmp/serialized.xml").arg("--output").arg("/tmp/serialized.xmllint.xml").status().expect("xmllint failed");
|
||||
|
||||
assert_eq!(config_file_str, serialized);
|
||||
}
|
||||
|
||||
@ -118,7 +118,10 @@ impl YaSerializeTrait for RawXml {
|
||||
|
||||
#[cfg(test)]
|
||||
mod test {
|
||||
use crate::infra::yaserde::to_xml_str;
|
||||
|
||||
use super::*;
|
||||
use pretty_assertions::assert_eq;
|
||||
use yaserde_derive::YaDeserialize;
|
||||
use yaserde_derive::YaSerialize;
|
||||
|
||||
@ -172,9 +175,46 @@ mod test {
|
||||
|
||||
#[test]
|
||||
fn rawxml_should_serialize_complex_documents() {
|
||||
let xml = r#"<?xml version="1.0" encoding="utf-8"?><xml><OpenVPN version="1.0.0"><Overwrites /><Instances /><StaticKeys /></OpenVPN><Gateways version="0.0.1" /><HAProxy version="4.0.0"><general><enabled>1</enabled><gracefulStop>0</gracefulStop><hardStopAfter>60s</hardStopAfter><closeSpreadTime /><seamlessReload>0</seamlessReload><storeOcsp>0</storeOcsp><showIntro>1</showIntro><peers><enabled>0</enabled><name1 /><listen1 /><port1>1024</port1><name2 /><listen2 /><port2>1024</port2></peers><tuning><root>0</root><maxConnections /><nbthread>1</nbthread><sslServerVerify>ignore</sslServerVerify><maxDHSize>2048</maxDHSize><bufferSize>16384</bufferSize></tuning></general></HAProxy></xml>"#;
|
||||
let xml = r#"<?xml version="1.0"?>
|
||||
<xml>
|
||||
<OpenVPN version="1.0.0">
|
||||
<Overwrites/>
|
||||
<Instances/>
|
||||
<StaticKeys/>
|
||||
</OpenVPN>
|
||||
<Gateways version="0.0.1"/>
|
||||
<HAProxy version="4.0.0">
|
||||
<general>
|
||||
<enabled>1</enabled>
|
||||
<gracefulStop>0</gracefulStop>
|
||||
<hardStopAfter>60s</hardStopAfter>
|
||||
<closeSpreadTime/>
|
||||
<seamlessReload>0</seamlessReload>
|
||||
<storeOcsp>0</storeOcsp>
|
||||
<showIntro>1</showIntro>
|
||||
<peers>
|
||||
<enabled>0</enabled>
|
||||
<name1/>
|
||||
<listen1/>
|
||||
<port1>1024</port1>
|
||||
<name2/>
|
||||
<listen2/>
|
||||
<port2>1024</port2>
|
||||
</peers>
|
||||
<tuning>
|
||||
<root>0</root>
|
||||
<maxConnections/>
|
||||
<nbthread>1</nbthread>
|
||||
<sslServerVerify>ignore</sslServerVerify>
|
||||
<maxDHSize>2048</maxDHSize>
|
||||
<bufferSize>16384</bufferSize>
|
||||
</tuning>
|
||||
</general>
|
||||
</HAProxy>
|
||||
</xml>
|
||||
"#;
|
||||
let rawxml: RawXml = yaserde::de::from_str(xml).unwrap();
|
||||
assert_eq!(yaserde::ser::to_string(&rawxml).unwrap(), xml);
|
||||
assert_eq!(to_xml_str(&rawxml).unwrap(), xml);
|
||||
}
|
||||
|
||||
#[test]
|
||||
|
||||
@ -1,4 +1,4 @@
|
||||
|
||||
pub mod generic_xml;
|
||||
pub mod maybe_string;
|
||||
pub mod yaserde;
|
||||
|
||||
|
||||
20
harmony-rs/opnsense-config/src/infra/yaserde.rs
Normal file
20
harmony-rs/opnsense-config/src/infra/yaserde.rs
Normal file
@ -0,0 +1,20 @@
|
||||
use yaserde::YaSerialize;
|
||||
|
||||
pub fn to_xml_str<T: YaSerialize>(model: &T) -> Result<String, String> {
|
||||
let yaserde_cfg = yaserde::ser::Config {
|
||||
perform_indent: true,
|
||||
write_document_declaration: false,
|
||||
pad_self_closing: false,
|
||||
..Default::default()
|
||||
};
|
||||
let serialized = yaserde::ser::to_string_with_config::<T>(model, &yaserde_cfg)?;
|
||||
|
||||
// Opnsense does not specify encoding in the document declaration
|
||||
//
|
||||
// yaserde / xml-rs does not allow disabling the encoding attribute in the
|
||||
// document declaration
|
||||
//
|
||||
// So here we just manually prefix the xml document with the exact document declaration
|
||||
// that opnsense uses
|
||||
Ok(format!("<?xml version=\"1.0\"?>\n{serialized}\n"))
|
||||
}
|
||||
@ -67,6 +67,8 @@ pub struct DhcpRange {
|
||||
|
||||
#[cfg(test)]
|
||||
mod test {
|
||||
use crate::infra::yaserde::to_xml_str;
|
||||
|
||||
use super::*;
|
||||
use pretty_assertions::assert_eq;
|
||||
|
||||
@ -75,19 +77,15 @@ mod test {
|
||||
let dhcpd: Dhcpd =
|
||||
yaserde::de::from_str(SERIALIZED_DHCPD).expect("Deserialize Dhcpd failed");
|
||||
|
||||
let yaserde_cfg = yaserde::ser::Config {
|
||||
perform_indent: true,
|
||||
write_document_declaration: false,
|
||||
..Default::default()
|
||||
};
|
||||
assert_eq!(
|
||||
yaserde::ser::to_string_with_config(&dhcpd, &yaserde_cfg)
|
||||
to_xml_str(&dhcpd)
|
||||
.expect("Serialize Dhcpd failed"),
|
||||
SERIALIZED_DHCPD
|
||||
);
|
||||
}
|
||||
|
||||
const SERIALIZED_DHCPD: &str = "<dhcpd>
|
||||
const SERIALIZED_DHCPD: &str = "<?xml version=\"1.0\"?>
|
||||
<dhcpd>
|
||||
<lan>
|
||||
<enable>1</enable>
|
||||
<gateway>192.168.20.1</gateway>
|
||||
@ -140,5 +138,5 @@ mod test {
|
||||
</staticmap>
|
||||
<pool/>
|
||||
</lan>
|
||||
</dhcpd>";
|
||||
</dhcpd>\n";
|
||||
}
|
||||
|
||||
@ -73,9 +73,11 @@ pub struct Revision {
|
||||
|
||||
#[derive(Default, PartialEq, Debug, YaSerialize, YaDeserialize)]
|
||||
pub struct Options {
|
||||
pub path: MaybeString,
|
||||
pub host: MaybeString,
|
||||
pub code: MaybeString,
|
||||
pub path: Option<MaybeString>,
|
||||
pub host: Option<MaybeString>,
|
||||
pub code: Option<MaybeString>,
|
||||
pub send: Option<MaybeString>,
|
||||
pub expect: Option<MaybeString>,
|
||||
}
|
||||
|
||||
#[derive(Default, PartialEq, Debug, YaSerialize, YaDeserialize)]
|
||||
@ -87,36 +89,39 @@ pub struct Filters {
|
||||
#[derive(Default, PartialEq, Debug, YaSerialize, YaDeserialize)]
|
||||
pub struct Rule {
|
||||
#[yaserde(attribute)]
|
||||
pub uuid: MaybeString,
|
||||
pub uuid: Option<String>,
|
||||
#[yaserde(rename = "associated-rule-id")]
|
||||
pub associated_rule_id: MaybeString,
|
||||
pub associated_rule_id: Option<MaybeString>,
|
||||
#[yaserde(rename = "type")]
|
||||
pub r#type: MaybeString,
|
||||
pub r#type: Option<MaybeString>,
|
||||
pub interface: String,
|
||||
pub ipprotocol: String,
|
||||
pub statetype: String,
|
||||
pub descr: String,
|
||||
pub direction: MaybeString,
|
||||
pub category: MaybeString,
|
||||
pub quick: MaybeString,
|
||||
pub protocol: String,
|
||||
pub statetype: Option<MaybeString>,
|
||||
pub descr: Option<MaybeString>,
|
||||
pub direction: Option<MaybeString>,
|
||||
pub category: Option<MaybeString>,
|
||||
pub quick: Option<MaybeString>,
|
||||
pub protocol: Option<MaybeString>,
|
||||
pub source: Source,
|
||||
pub icmptype: Option<MaybeString>,
|
||||
pub destination: Destination,
|
||||
pub updated: Option<Updated>,
|
||||
pub created: Created,
|
||||
pub disabled: Option<u8>,
|
||||
pub created: Option<Created>,
|
||||
pub disabled: Option<MaybeString>,
|
||||
}
|
||||
|
||||
#[derive(Default, PartialEq, Debug, YaSerialize, YaDeserialize)]
|
||||
pub struct Source {
|
||||
pub any: Option<u8>,
|
||||
pub network: Option<MaybeString>,
|
||||
}
|
||||
|
||||
#[derive(Default, PartialEq, Debug, YaSerialize, YaDeserialize)]
|
||||
pub struct Destination {
|
||||
pub network: MaybeString,
|
||||
pub address: MaybeString,
|
||||
pub port: Option<u16>,
|
||||
pub network: Option<MaybeString>,
|
||||
pub address: Option<MaybeString>,
|
||||
pub port: Option<MaybeString>,
|
||||
pub any: Option<MaybeString>,
|
||||
}
|
||||
|
||||
#[derive(Default, PartialEq, Debug, YaSerialize, YaDeserialize)]
|
||||
@ -343,7 +348,7 @@ pub struct Snmpd {
|
||||
|
||||
#[derive(Default, PartialEq, Debug, YaSerialize, YaDeserialize)]
|
||||
pub struct Syslog {
|
||||
pub reverse: Option<u8>,
|
||||
pub reverse: Option<MaybeString>,
|
||||
pub preservelogs: i32,
|
||||
}
|
||||
|
||||
@ -368,10 +373,11 @@ pub struct NatRule {
|
||||
pub ipprotocol: String,
|
||||
pub descr: MaybeString,
|
||||
pub tag: MaybeString,
|
||||
pub tagged: Option<u8>,
|
||||
pub tagged: Option<MaybeString>,
|
||||
pub poolopts: PoolOpts,
|
||||
#[yaserde(rename = "associated-rule-id")]
|
||||
pub associated_rule_id: String,
|
||||
pub associated_rule_id: Option<MaybeString>,
|
||||
pub disabled: Option<u8>,
|
||||
pub target: String,
|
||||
#[yaserde(rename = "local-port")]
|
||||
pub local_port: i32,
|
||||
@ -439,7 +445,7 @@ pub struct OPNsenseConfig {
|
||||
|
||||
#[derive(Debug, YaSerialize, YaDeserialize, PartialEq)]
|
||||
#[yaserde(rename = "IDS")]
|
||||
struct IDS {
|
||||
pub struct IDS {
|
||||
#[yaserde(attribute)]
|
||||
version: String,
|
||||
rules: MaybeString,
|
||||
@ -501,30 +507,30 @@ pub struct ConfigInterfaces {
|
||||
}
|
||||
|
||||
#[derive(Debug, YaSerialize, YaDeserialize, PartialEq)]
|
||||
struct Vxlan {
|
||||
pub struct Vxlan {
|
||||
#[yaserde(attribute)]
|
||||
version: String,
|
||||
}
|
||||
|
||||
#[derive(Debug, YaSerialize, YaDeserialize, PartialEq)]
|
||||
struct Loopback {
|
||||
pub struct Loopback {
|
||||
#[yaserde(attribute)]
|
||||
version: String,
|
||||
}
|
||||
|
||||
#[derive(Debug, YaSerialize, YaDeserialize, PartialEq)]
|
||||
#[yaserde(rename = "monit")]
|
||||
struct Monit {
|
||||
pub struct Monit {
|
||||
#[yaserde(attribute)]
|
||||
version: String,
|
||||
general: GeneralMonit,
|
||||
alert: Option<Alert>,
|
||||
service: Option<Service>,
|
||||
test: Option<Test>,
|
||||
service: Vec<Service>,
|
||||
test: Vec<Test>,
|
||||
}
|
||||
|
||||
#[derive(Debug, YaSerialize, YaDeserialize, PartialEq)]
|
||||
struct GeneralMonit {
|
||||
pub struct GeneralMonit {
|
||||
enabled: u8,
|
||||
interval: u32,
|
||||
startdelay: u32,
|
||||
@ -537,20 +543,30 @@ struct GeneralMonit {
|
||||
sslverify: u8,
|
||||
logfile: String,
|
||||
statefile: MaybeString,
|
||||
eventqueuePath: MaybeString,
|
||||
eventqueueSlots: MaybeString,
|
||||
httpdEnabled: u8,
|
||||
httpdUsername: String,
|
||||
httpdPassword: String,
|
||||
httpdPort: u16,
|
||||
httpdAllow: MaybeString,
|
||||
mmonitUrl: MaybeString,
|
||||
mmonitTimeout: u32,
|
||||
mmonitRegisterCredentials: u8,
|
||||
#[yaserde(rename = "eventqueuePath")]
|
||||
event_queue_path: MaybeString,
|
||||
#[yaserde(rename = "eventqueueSlots")]
|
||||
event_queue_slots: MaybeString,
|
||||
#[yaserde(rename = "httpdEnabled")]
|
||||
httpd_enabled: u8,
|
||||
#[yaserde(rename = "httpdUsername")]
|
||||
httpd_username: String,
|
||||
#[yaserde(rename = "httpdPassword")]
|
||||
httpd_password: String,
|
||||
#[yaserde(rename = "httpdPort")]
|
||||
httpd_port: u16,
|
||||
#[yaserde(rename = "httpdAllow")]
|
||||
httpd_allow: MaybeString,
|
||||
#[yaserde(rename = "mmonitUrl")]
|
||||
mmonit_url: MaybeString,
|
||||
#[yaserde(rename = "mmonitTimeout")]
|
||||
mmonit_timeout: u32,
|
||||
#[yaserde(rename = "mmonitRegisterCredentials")]
|
||||
mmonit_register_credentials: u8,
|
||||
}
|
||||
|
||||
#[derive(Debug, YaSerialize, YaDeserialize, PartialEq)]
|
||||
struct Alert {
|
||||
pub struct Alert {
|
||||
#[yaserde(attribute)]
|
||||
uuid: String,
|
||||
enabled: u8,
|
||||
@ -563,7 +579,7 @@ struct Alert {
|
||||
}
|
||||
|
||||
#[derive(Debug, YaSerialize, YaDeserialize, PartialEq)]
|
||||
struct Service {
|
||||
pub struct Service {
|
||||
#[yaserde(attribute)]
|
||||
uuid: String,
|
||||
enabled: u8,
|
||||
@ -587,7 +603,7 @@ struct Service {
|
||||
}
|
||||
|
||||
#[derive(Debug, YaSerialize, YaDeserialize, PartialEq)]
|
||||
struct Test {
|
||||
pub struct Test {
|
||||
#[yaserde(attribute)]
|
||||
uuid: String,
|
||||
name: String,
|
||||
@ -635,7 +651,7 @@ pub struct Capture {
|
||||
#[yaserde(rename = "interfaces")]
|
||||
pub interfaces: MaybeString,
|
||||
#[yaserde(rename = "egress_only")]
|
||||
pub egress_only: Option<u8>,
|
||||
pub egress_only: MaybeString,
|
||||
#[yaserde(rename = "version")]
|
||||
pub version: MaybeString,
|
||||
#[yaserde(rename = "targets")]
|
||||
@ -725,7 +741,7 @@ pub struct Firewall {
|
||||
#[derive(Default, PartialEq, Debug, YaSerialize, YaDeserialize)]
|
||||
pub struct LvTemplate {
|
||||
#[yaserde(attribute)]
|
||||
pub version: MaybeString,
|
||||
pub version: String,
|
||||
#[yaserde(rename = "templates")]
|
||||
pub templates: Option<Templates>,
|
||||
}
|
||||
@ -733,7 +749,7 @@ pub struct LvTemplate {
|
||||
#[derive(Default, PartialEq, Debug, YaSerialize, YaDeserialize)]
|
||||
pub struct Category {
|
||||
#[yaserde(attribute)]
|
||||
pub version: MaybeString,
|
||||
pub version: String,
|
||||
#[yaserde(rename = "categories")]
|
||||
pub categories: Option<Categories>,
|
||||
}
|
||||
@ -747,7 +763,7 @@ pub struct Categories {
|
||||
#[derive(Default, PartialEq, Debug, YaSerialize, YaDeserialize)]
|
||||
pub struct CategoryItem {
|
||||
#[yaserde(attribute)]
|
||||
pub uuid: MaybeString,
|
||||
pub uuid: String,
|
||||
#[yaserde(rename = "name")]
|
||||
pub name: MaybeString,
|
||||
#[yaserde(rename = "auto")]
|
||||
@ -759,7 +775,7 @@ pub struct CategoryItem {
|
||||
#[derive(Default, PartialEq, Debug, YaSerialize, YaDeserialize)]
|
||||
pub struct Alias {
|
||||
#[yaserde(attribute)]
|
||||
pub version: MaybeString,
|
||||
pub version: String,
|
||||
#[yaserde(rename = "geoip")]
|
||||
pub geoip: Option<GeoIP>,
|
||||
#[yaserde(rename = "aliases")]
|
||||
@ -786,13 +802,13 @@ pub struct AliasItem {
|
||||
pub name: String,
|
||||
#[yaserde(rename = "type")]
|
||||
pub r#type: String,
|
||||
pub proto: MaybeString,
|
||||
pub interface: MaybeString,
|
||||
pub counters: String,
|
||||
pub updatefreq: MaybeString,
|
||||
pub content: String,
|
||||
pub categories: MaybeString,
|
||||
pub description: MaybeString,
|
||||
pub proto: MaybeString,
|
||||
}
|
||||
|
||||
#[derive(Default, PartialEq, Debug, YaSerialize, YaDeserialize)]
|
||||
@ -1707,19 +1723,21 @@ pub struct HAProxyHealthCheck {
|
||||
pub tcp_send_value: MaybeString,
|
||||
#[yaserde(rename = "tcp_matchType")]
|
||||
pub tcp_match_type: MaybeString,
|
||||
pub tcp_negate: MaybeString,
|
||||
#[yaserde(rename = "tcp_matchValue")]
|
||||
pub tcp_match_value: MaybeString,
|
||||
pub tcp_negate: MaybeString,
|
||||
#[yaserde(rename = "agentPort")]
|
||||
pub agent_port: MaybeString,
|
||||
pub mysql_user: MaybeString,
|
||||
pub mysql_post41: MaybeString,
|
||||
pub pgsql_user: MaybeString,
|
||||
#[yaserde(alias = "smtpDomain")]
|
||||
pub smtp_domain: MaybeString,
|
||||
pub esmtp_domain: MaybeString,
|
||||
#[yaserde(rename = "agentPort")]
|
||||
pub agent_port_uppercase: MaybeString,
|
||||
#[yaserde(rename = "dbUser")]
|
||||
pub db_user: MaybeString,
|
||||
#[yaserde(rename = "smtpDomain")]
|
||||
pub smtp_domain_uppercase: MaybeString,
|
||||
}
|
||||
|
||||
#[derive(Default, PartialEq, Debug, YaSerialize, YaDeserialize)]
|
||||
|
||||
@ -28,28 +28,22 @@
|
||||
<value>default</value>
|
||||
</item>
|
||||
<item>
|
||||
<descr>
|
||||
Source routing is another way for an attacker to try to reach non-routable addresses behind your box.
|
||||
<descr>Source routing is another way for an attacker to try to reach non-routable addresses behind your box.
|
||||
It can also be used to probe for information about your internal networks. These functions come enabled
|
||||
as part of the standard FreeBSD core system.
|
||||
</descr>
|
||||
as part of the standard FreeBSD core system.</descr>
|
||||
<tunable>net.inet.ip.sourceroute</tunable>
|
||||
<value>default</value>
|
||||
</item>
|
||||
<item>
|
||||
<descr>
|
||||
Source routing is another way for an attacker to try to reach non-routable addresses behind your box.
|
||||
<descr>Source routing is another way for an attacker to try to reach non-routable addresses behind your box.
|
||||
It can also be used to probe for information about your internal networks. These functions come enabled
|
||||
as part of the standard FreeBSD core system.
|
||||
</descr>
|
||||
as part of the standard FreeBSD core system.</descr>
|
||||
<tunable>net.inet.ip.accept_sourceroute</tunable>
|
||||
<value>default</value>
|
||||
</item>
|
||||
<item>
|
||||
<descr>
|
||||
This option turns off the logging of redirect packets because there is no limit and this could fill
|
||||
up your logs consuming your whole hard drive.
|
||||
</descr>
|
||||
<descr>This option turns off the logging of redirect packets because there is no limit and this could fill
|
||||
up your logs consuming your whole hard drive.</descr>
|
||||
<tunable>net.inet.icmp.log_redirect</tunable>
|
||||
<value>default</value>
|
||||
</item>
|
||||
@ -190,17 +184,14 @@
|
||||
</item>
|
||||
<item>
|
||||
<descr>Enable/disable sending of ICMP redirects in response to IP packets for which a better,
|
||||
and for the sender directly reachable, route and next hop is known.
|
||||
</descr>
|
||||
and for the sender directly reachable, route and next hop is known.</descr>
|
||||
<tunable>net.inet.ip.redirect</tunable>
|
||||
<value>0</value>
|
||||
</item>
|
||||
<item>
|
||||
<descr>
|
||||
Redirect attacks are the purposeful mass-issuing of ICMP type 5 packets. In a normal network, redirects
|
||||
<descr>Redirect attacks are the purposeful mass-issuing of ICMP type 5 packets. In a normal network, redirects
|
||||
to the end stations should not be required. This option enables the NIC to drop all inbound ICMP redirect
|
||||
packets without returning a response.
|
||||
</descr>
|
||||
packets without returning a response.</descr>
|
||||
<tunable>net.inet.icmp.drop_redirect</tunable>
|
||||
<value>1</value>
|
||||
</item>
|
||||
@ -1039,10 +1030,10 @@
|
||||
<direction>in</direction>
|
||||
<quick>1</quick>
|
||||
<protocol>icmp</protocol>
|
||||
<icmptype>echoreq</icmptype>
|
||||
<source>
|
||||
<any>1</any>
|
||||
</source>
|
||||
<icmptype>echoreq</icmptype>
|
||||
<destination>
|
||||
<network>wanip</network>
|
||||
</destination>
|
||||
@ -1058,20 +1049,20 @@
|
||||
</created>
|
||||
</rule>
|
||||
<rule uuid="492b7596-d929-46cb-a6b9-c9cc34a0ca74">
|
||||
<associated-rule-id>nat_618812d37b8193.31302503</associated-rule-id>
|
||||
<interface>wan</interface>
|
||||
<ipprotocol>inet</ipprotocol>
|
||||
<statetype>keep state</statetype>
|
||||
<descr/>
|
||||
<category/>
|
||||
<protocol>tcp</protocol>
|
||||
<source>
|
||||
<any>1</any>
|
||||
</source>
|
||||
<interface>wan</interface>
|
||||
<statetype>keep state</statetype>
|
||||
<protocol>tcp</protocol>
|
||||
<ipprotocol>inet</ipprotocol>
|
||||
<destination>
|
||||
<address>x3690_3</address>
|
||||
<port>22</port>
|
||||
</destination>
|
||||
<descr/>
|
||||
<category/>
|
||||
<associated-rule-id>nat_618812d37b8193.31302503</associated-rule-id>
|
||||
<created>
|
||||
<username>root@192.168.1.118</username>
|
||||
<time>1636307667.5059</time>
|
||||
@ -1079,20 +1070,20 @@
|
||||
</created>
|
||||
</rule>
|
||||
<rule uuid="eeba39a9-d0f6-4b1e-a785-7278b0b241ab">
|
||||
<associated-rule-id>nat_64fa19f4acba11.80049900</associated-rule-id>
|
||||
<interface>wan</interface>
|
||||
<ipprotocol>inet</ipprotocol>
|
||||
<statetype>keep state</statetype>
|
||||
<descr/>
|
||||
<category/>
|
||||
<protocol>tcp</protocol>
|
||||
<source>
|
||||
<any>1</any>
|
||||
</source>
|
||||
<interface>wan</interface>
|
||||
<statetype>keep state</statetype>
|
||||
<protocol>tcp</protocol>
|
||||
<ipprotocol>inet</ipprotocol>
|
||||
<destination>
|
||||
<address>192.168.20.150</address>
|
||||
<port>7860</port>
|
||||
</destination>
|
||||
<descr/>
|
||||
<category/>
|
||||
<associated-rule-id>nat_64fa19f4acba11.80049900</associated-rule-id>
|
||||
<created>
|
||||
<username>root@172.12.0.10</username>
|
||||
<time>1694112244.7075</time>
|
||||
@ -1100,20 +1091,20 @@
|
||||
</created>
|
||||
</rule>
|
||||
<rule uuid="c19adc1c-fec2-4183-93ed-5e46efca1adf">
|
||||
<associated-rule-id>nat_64fb1fbba71e29.76190279</associated-rule-id>
|
||||
<interface>wan</interface>
|
||||
<ipprotocol>inet</ipprotocol>
|
||||
<statetype>keep state</statetype>
|
||||
<descr/>
|
||||
<category/>
|
||||
<protocol>tcp</protocol>
|
||||
<source>
|
||||
<any>1</any>
|
||||
</source>
|
||||
<interface>wan</interface>
|
||||
<statetype>keep state</statetype>
|
||||
<protocol>tcp</protocol>
|
||||
<ipprotocol>inet</ipprotocol>
|
||||
<destination>
|
||||
<address>192.168.20.150</address>
|
||||
<port>7861</port>
|
||||
</destination>
|
||||
<descr/>
|
||||
<category/>
|
||||
<associated-rule-id>nat_64fb1fbba71e29.76190279</associated-rule-id>
|
||||
<created>
|
||||
<username>root@172.12.0.10</username>
|
||||
<time>1694179259.6845</time>
|
||||
@ -1121,20 +1112,20 @@
|
||||
</created>
|
||||
</rule>
|
||||
<rule uuid="c0831633-8c3b-408e-82d0-3e3f61d0ee3d">
|
||||
<associated-rule-id>nat_64fb1fcea6d8b7.62653343</associated-rule-id>
|
||||
<interface>wan</interface>
|
||||
<ipprotocol>inet</ipprotocol>
|
||||
<statetype>keep state</statetype>
|
||||
<descr/>
|
||||
<category/>
|
||||
<protocol>tcp</protocol>
|
||||
<source>
|
||||
<any>1</any>
|
||||
</source>
|
||||
<interface>wan</interface>
|
||||
<statetype>keep state</statetype>
|
||||
<protocol>tcp</protocol>
|
||||
<ipprotocol>inet</ipprotocol>
|
||||
<destination>
|
||||
<address>192.168.20.150</address>
|
||||
<port>7862</port>
|
||||
</destination>
|
||||
<descr/>
|
||||
<category/>
|
||||
<associated-rule-id>nat_64fb1fcea6d8b7.62653343</associated-rule-id>
|
||||
<created>
|
||||
<username>root@172.12.0.10</username>
|
||||
<time>1694179278.6835</time>
|
||||
@ -1142,20 +1133,20 @@
|
||||
</created>
|
||||
</rule>
|
||||
<rule uuid="3f600791-1fa6-4cb4-877d-45fe2ea175a9">
|
||||
<associated-rule-id>nat_64fb1fdb48ff18.28912920</associated-rule-id>
|
||||
<interface>wan</interface>
|
||||
<ipprotocol>inet</ipprotocol>
|
||||
<statetype>keep state</statetype>
|
||||
<descr/>
|
||||
<category/>
|
||||
<protocol>tcp</protocol>
|
||||
<source>
|
||||
<any>1</any>
|
||||
</source>
|
||||
<interface>wan</interface>
|
||||
<statetype>keep state</statetype>
|
||||
<protocol>tcp</protocol>
|
||||
<ipprotocol>inet</ipprotocol>
|
||||
<destination>
|
||||
<address>192.168.20.150</address>
|
||||
<port>7863</port>
|
||||
</destination>
|
||||
<descr/>
|
||||
<category/>
|
||||
<associated-rule-id>nat_64fb1fdb48ff18.28912920</associated-rule-id>
|
||||
<created>
|
||||
<username>root@172.12.0.10</username>
|
||||
<time>1694179291.299</time>
|
||||
@ -1163,20 +1154,20 @@
|
||||
</created>
|
||||
</rule>
|
||||
<rule uuid="7dd160f0-663e-465b-be94-a069df112a95">
|
||||
<associated-rule-id>nat_651ffc35e573d9.09092618</associated-rule-id>
|
||||
<interface>wan</interface>
|
||||
<ipprotocol>inet</ipprotocol>
|
||||
<statetype>keep state</statetype>
|
||||
<descr/>
|
||||
<category/>
|
||||
<protocol>tcp</protocol>
|
||||
<source>
|
||||
<any>1</any>
|
||||
</source>
|
||||
<interface>wan</interface>
|
||||
<statetype>keep state</statetype>
|
||||
<protocol>tcp</protocol>
|
||||
<ipprotocol>inet</ipprotocol>
|
||||
<destination>
|
||||
<address>192.168.20.140</address>
|
||||
<port>22</port>
|
||||
</destination>
|
||||
<descr/>
|
||||
<category/>
|
||||
<associated-rule-id>nat_651ffc35e573d9.09092618</associated-rule-id>
|
||||
<created>
|
||||
<username>root@172.12.0.11</username>
|
||||
<time>1696594997.9399</time>
|
||||
@ -1185,19 +1176,19 @@
|
||||
</rule>
|
||||
<rule uuid="1e576704-da50-4dd9-a425-77fa5c4e563a">
|
||||
<associated-rule-id>nat_65aed5a66c4f65.25454286</associated-rule-id>
|
||||
<interface>wan</interface>
|
||||
<ipprotocol>inet</ipprotocol>
|
||||
<statetype>keep state</statetype>
|
||||
<descr/>
|
||||
<category/>
|
||||
<protocol>tcp</protocol>
|
||||
<source>
|
||||
<any>1</any>
|
||||
</source>
|
||||
<interface>wan</interface>
|
||||
<statetype>keep state</statetype>
|
||||
<protocol>tcp</protocol>
|
||||
<ipprotocol>inet</ipprotocol>
|
||||
<destination>
|
||||
<address>192.168.20.140</address>
|
||||
<port>8081</port>
|
||||
</destination>
|
||||
<descr/>
|
||||
<category/>
|
||||
<created>
|
||||
<username>root@192.168.20.100</username>
|
||||
<time>1705956774.4437</time>
|
||||
@ -1206,19 +1197,19 @@
|
||||
</rule>
|
||||
<rule uuid="aa41dd13-9c5a-4048-8820-f9558cea8ba3">
|
||||
<associated-rule-id>nat_65aed67d497580.58958916</associated-rule-id>
|
||||
<interface>wan</interface>
|
||||
<ipprotocol>inet</ipprotocol>
|
||||
<statetype>keep state</statetype>
|
||||
<descr/>
|
||||
<category/>
|
||||
<protocol>tcp</protocol>
|
||||
<source>
|
||||
<any>1</any>
|
||||
</source>
|
||||
<interface>wan</interface>
|
||||
<statetype>keep state</statetype>
|
||||
<protocol>tcp</protocol>
|
||||
<ipprotocol>inet</ipprotocol>
|
||||
<destination>
|
||||
<address>192.168.20.160</address>
|
||||
<port>8080</port>
|
||||
</destination>
|
||||
<descr/>
|
||||
<category/>
|
||||
<created>
|
||||
<username>root@192.168.20.100</username>
|
||||
<time>1705956989.3009</time>
|
||||
@ -1227,19 +1218,19 @@
|
||||
</rule>
|
||||
<rule uuid="dfd53bf0-cea9-4254-8b0a-106f327d72e5">
|
||||
<associated-rule-id>nat_65aed6961c4ea7.81903986</associated-rule-id>
|
||||
<interface>wan</interface>
|
||||
<ipprotocol>inet</ipprotocol>
|
||||
<statetype>keep state</statetype>
|
||||
<descr/>
|
||||
<category/>
|
||||
<protocol>tcp</protocol>
|
||||
<source>
|
||||
<any>1</any>
|
||||
</source>
|
||||
<interface>wan</interface>
|
||||
<statetype>keep state</statetype>
|
||||
<protocol>tcp</protocol>
|
||||
<ipprotocol>inet</ipprotocol>
|
||||
<destination>
|
||||
<address>192.168.20.160</address>
|
||||
<port>4000</port>
|
||||
</destination>
|
||||
<descr/>
|
||||
<category/>
|
||||
<created>
|
||||
<username>root@192.168.20.100</username>
|
||||
<time>1705957014.116</time>
|
||||
@ -1248,19 +1239,19 @@
|
||||
</rule>
|
||||
<rule uuid="777bdd94-51b9-4daf-b744-70b9cb3c9f94">
|
||||
<associated-rule-id>nat_65f4a5b928c9a7.52477383</associated-rule-id>
|
||||
<interface>wan</interface>
|
||||
<ipprotocol>inet</ipprotocol>
|
||||
<statetype>keep state</statetype>
|
||||
<descr/>
|
||||
<category/>
|
||||
<protocol>tcp</protocol>
|
||||
<source>
|
||||
<any>1</any>
|
||||
</source>
|
||||
<interface>wan</interface>
|
||||
<statetype>keep state</statetype>
|
||||
<protocol>tcp</protocol>
|
||||
<ipprotocol>inet</ipprotocol>
|
||||
<destination>
|
||||
<address>192.168.20.115</address>
|
||||
<port>5000</port>
|
||||
</destination>
|
||||
<descr/>
|
||||
<category/>
|
||||
<created>
|
||||
<username>root@192.168.20.100</username>
|
||||
<time>1710532025.1671</time>
|
||||
@ -1269,19 +1260,19 @@
|
||||
</rule>
|
||||
<rule uuid="98f400f5-1a91-46aa-8d35-f78b34bc7a04">
|
||||
<associated-rule-id>nat_662bb59baf7573.98640354</associated-rule-id>
|
||||
<interface>wan</interface>
|
||||
<ipprotocol>inet</ipprotocol>
|
||||
<statetype>keep state</statetype>
|
||||
<descr>Redirecting to someservice1 on somehost9</descr>
|
||||
<category/>
|
||||
<protocol>tcp</protocol>
|
||||
<source>
|
||||
<any>1</any>
|
||||
</source>
|
||||
<interface>wan</interface>
|
||||
<statetype>keep state</statetype>
|
||||
<protocol>tcp</protocol>
|
||||
<ipprotocol>inet</ipprotocol>
|
||||
<destination>
|
||||
<address>192.168.20.115</address>
|
||||
<port>11434</port>
|
||||
</destination>
|
||||
<descr>Redirecting to someservice1 on somehost9</descr>
|
||||
<category/>
|
||||
<created>
|
||||
<username>root@192.168.20.100</username>
|
||||
<time>1714140571.7187</time>
|
||||
@ -1290,19 +1281,19 @@
|
||||
</rule>
|
||||
<rule uuid="fef5ec47-f5e7-45cc-a9f7-f8eeb6d1160c">
|
||||
<associated-rule-id>nat_663c3458b7b5e4.19986620</associated-rule-id>
|
||||
<interface>wan</interface>
|
||||
<ipprotocol>inet</ipprotocol>
|
||||
<statetype>keep state</statetype>
|
||||
<descr>Redirecting to someservice81 on somehost9</descr>
|
||||
<category/>
|
||||
<protocol>tcp</protocol>
|
||||
<source>
|
||||
<any>1</any>
|
||||
</source>
|
||||
<interface>wan</interface>
|
||||
<statetype>keep state</statetype>
|
||||
<protocol>tcp</protocol>
|
||||
<ipprotocol>inet</ipprotocol>
|
||||
<destination>
|
||||
<address>192.168.20.115</address>
|
||||
<port>27017</port>
|
||||
</destination>
|
||||
<descr>Redirecting to someservice81 on somehost9</descr>
|
||||
<category/>
|
||||
<created>
|
||||
<username>root@172.12.0.8</username>
|
||||
<time>1715221592.7525</time>
|
||||
@ -1311,19 +1302,19 @@
|
||||
</rule>
|
||||
<rule uuid="4170cf4e-4116-42e9-a3ec-eff6768bca9d">
|
||||
<associated-rule-id>nat_663d85b2e3b364.53108170</associated-rule-id>
|
||||
<interface>wan</interface>
|
||||
<ipprotocol>inet</ipprotocol>
|
||||
<statetype>keep state</statetype>
|
||||
<descr>Redirecting to someservice858 on somehost545</descr>
|
||||
<category/>
|
||||
<protocol>tcp</protocol>
|
||||
<source>
|
||||
<any>1</any>
|
||||
</source>
|
||||
<interface>wan</interface>
|
||||
<statetype>keep state</statetype>
|
||||
<protocol>tcp</protocol>
|
||||
<ipprotocol>inet</ipprotocol>
|
||||
<destination>
|
||||
<address>192.168.20.163</address>
|
||||
<port>8888</port>
|
||||
</destination>
|
||||
<descr>Redirecting to someservice858 on somehost545</descr>
|
||||
<category/>
|
||||
<created>
|
||||
<username>root@172.12.0.10</username>
|
||||
<time>1715307954.9327</time>
|
||||
@ -1332,19 +1323,19 @@
|
||||
</rule>
|
||||
<rule uuid="79e4325d-93af-4af2-9fa0-263c69545eb0">
|
||||
<associated-rule-id>nat_666c8932142ed6.34062700</associated-rule-id>
|
||||
<interface>wan</interface>
|
||||
<ipprotocol>inet</ipprotocol>
|
||||
<statetype>keep state</statetype>
|
||||
<descr>Redirecting to someservice858 on somehost9</descr>
|
||||
<category/>
|
||||
<protocol>tcp</protocol>
|
||||
<source>
|
||||
<any>1</any>
|
||||
</source>
|
||||
<interface>wan</interface>
|
||||
<statetype>keep state</statetype>
|
||||
<protocol>tcp</protocol>
|
||||
<ipprotocol>inet</ipprotocol>
|
||||
<destination>
|
||||
<address>192.168.20.115</address>
|
||||
<port>8888</port>
|
||||
</destination>
|
||||
<descr>Redirecting to someservice858 on somehost9</descr>
|
||||
<category/>
|
||||
<created>
|
||||
<username>root@192.168.20.100</username>
|
||||
<time>1718389042.0827</time>
|
||||
@ -1353,19 +1344,19 @@
|
||||
</rule>
|
||||
<rule uuid="1b68a264-e475-4cc6-b852-0797154fdf2b">
|
||||
<associated-rule-id>nat_667cd97504d870.57128970</associated-rule-id>
|
||||
<interface>wan</interface>
|
||||
<ipprotocol>inet</ipprotocol>
|
||||
<statetype>keep state</statetype>
|
||||
<descr>Redirecting to someservice858 on somehost545</descr>
|
||||
<category/>
|
||||
<protocol>tcp</protocol>
|
||||
<source>
|
||||
<any>1</any>
|
||||
</source>
|
||||
<interface>wan</interface>
|
||||
<statetype>keep state</statetype>
|
||||
<protocol>tcp</protocol>
|
||||
<ipprotocol>inet</ipprotocol>
|
||||
<destination>
|
||||
<address>192.168.20.163</address>
|
||||
<port>8889</port>
|
||||
</destination>
|
||||
<descr>Redirecting to someservice858 on somehost545</descr>
|
||||
<category/>
|
||||
<created>
|
||||
<username>root@172.12.0.8</username>
|
||||
<time>1719458165.0199</time>
|
||||
@ -1401,9 +1392,9 @@
|
||||
</rule>
|
||||
<rule uuid="96d70c20-b78c-4e18-9823-79b71eba964c">
|
||||
<type>pass</type>
|
||||
<interface>lan</interface>
|
||||
<ipprotocol>inet</ipprotocol>
|
||||
<descr>Default allow LAN to any rule</descr>
|
||||
<interface>lan</interface>
|
||||
<source>
|
||||
<network>lan</network>
|
||||
</source>
|
||||
@ -1413,9 +1404,9 @@
|
||||
</rule>
|
||||
<rule uuid="61194fb7-8916-4e30-a32b-a90495987c64">
|
||||
<type>pass</type>
|
||||
<interface>lan</interface>
|
||||
<ipprotocol>inet6</ipprotocol>
|
||||
<descr>Default allow LAN IPv6 to any rule</descr>
|
||||
<interface>lan</interface>
|
||||
<source>
|
||||
<network>lan</network>
|
||||
</source>
|
||||
@ -1474,19 +1465,19 @@
|
||||
</rule>
|
||||
<rule>
|
||||
<associated-rule-id>nat_6709763b6a6748.85579760</associated-rule-id>
|
||||
<interface>wan</interface>
|
||||
<ipprotocol>inet</ipprotocol>
|
||||
<statetype>keep state</statetype>
|
||||
<descr>port forwarding for reconfig of someservice2 somehost3</descr>
|
||||
<category/>
|
||||
<protocol>tcp</protocol>
|
||||
<source>
|
||||
<any>1</any>
|
||||
</source>
|
||||
<interface>wan</interface>
|
||||
<statetype>keep state</statetype>
|
||||
<protocol>tcp</protocol>
|
||||
<ipprotocol>inet</ipprotocol>
|
||||
<destination>
|
||||
<address>192.168.20.132</address>
|
||||
<port>55555</port>
|
||||
</destination>
|
||||
<descr>port forwarding for reconfig of someservice2 somehost3</descr>
|
||||
<category/>
|
||||
<created>
|
||||
<username>root@172.12.0.12</username>
|
||||
<time>1728673339.4359</time>
|
||||
@ -1496,19 +1487,19 @@
|
||||
</rule>
|
||||
<rule>
|
||||
<associated-rule-id>nat_670979b3279551.73601303</associated-rule-id>
|
||||
<interface>wan</interface>
|
||||
<ipprotocol>inet</ipprotocol>
|
||||
<statetype>keep state</statetype>
|
||||
<descr>port forwarding for virtual ip for someservice2 servers</descr>
|
||||
<category/>
|
||||
<protocol>tcp</protocol>
|
||||
<source>
|
||||
<any>1</any>
|
||||
</source>
|
||||
<interface>wan</interface>
|
||||
<statetype>keep state</statetype>
|
||||
<protocol>tcp</protocol>
|
||||
<ipprotocol>inet</ipprotocol>
|
||||
<destination>
|
||||
<address>192.168.20.1</address>
|
||||
<port>55555</port>
|
||||
</destination>
|
||||
<descr>port forwarding for virtual ip for someservice2 servers</descr>
|
||||
<category/>
|
||||
<created>
|
||||
<username>root@172.12.0.12</username>
|
||||
<time>1728674227.1622</time>
|
||||
|
||||
Loading…
Reference in New Issue
Block a user